Hello ,
i’m getting iis logs on loki and working probably with promtail , what i’m looking is how can matching and parsing sent , recive digits on Log line with loki query , it’s doest work with me , plus iis Log line didn’t provide labeling as json nginix , example of log below ,
2024-06-24 11:13:16 W3SVC2 BID-API-1-VBB 55.66.77.88 GET /Channel/api/Transactions/Soft 2033 - 44.55.66.77 Dart/3.2+(dart:io) - 200 0 0 658 658 11 22.33.44.44
which sent , receive 658 658 , also will apply that on 11 which it’s time to connection , and those digits are dynamic not fixed as status code 200 or uri . so i facing difficult to mark them and build query … any help please .